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CLAIMS 

What is claimed is: 

A system for managing client accounts and controlling access to resources over 
data networks, said system comprising: 



(a) \a mechanism for sharing client information and charges among a plurality of 
Service providers, 

(b) A client who is registered with one of the service providers (the "home 
provider") and is allowed to access the resources of the other service providers 
("outside; providers") that are part of the system, 



(c) a settling msans adapted to allow the system to settle accounts among service 
providers by Vharging the home provider for access by its clients to the 
resources of theNputside providers, 

(d) a payment means Adapted to assure that the outside providers are then paid 
for that access througnythe system, 



(e) a sharing means adapted to, allow the system to allow the providers to share 
users without requiring an open account for each user at each provider, and 

(f) a verification means adapted to allow each provider to determine if a particular 
client is a member of the system, ver^y that the client has authenticated at his 
home provider, and determine^ this clieh^s access or service privileges and 
criteria. 



2. A system as recited in claim 1 by which the owfaer of goods may sell access 
to those goods across a data network such that the owneAmay instantaneously and 
simultaneously display across the network multiple differing prices of the same good or 
classes of goods depending upon the alternative pricing requirement^ of other clients of the 
system as transferred by the system. 
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A system as recited in claim 1, by which one member of the system may 
instantaneously configure the form and substance of services or goods across a data network 
provided tOv different or unique clients in response to data about the client provided by the 
system along\with the client's request for service. 

4. AXsystem as recited in claim 1, by which one member of the system may 
instantaneously determine whether or what type or form of service or goods across a data 
network to provide to different or unique clients of the system based upon data about the 
client provided along with the client's request for service. 

5. A system akrecited in Claim 1, by which multiple members of the system may 
aggregate, transfer and share data about the clients of the system, in a standardized form 
which identifies each client by a unique alpha-numeric sequence, but where the personal 
identifying attributes of the clieiit (such as name, address or credit and billing information) 

^~need be known only to the one system member responsible for enrolling the client. 

6. A system as recited iAciaim 1, in which a client of the system may request 
access to, review of, or purchase of resources or goods across a data network of members of 
the system on the basis of specific attributes of the client which the client elects to provide 
at the moment when service is requested, V/here such attributes are technically capable of 
being an integral and automatic part of the request form. 

7. A system as recited in Claim 1, in which a provider of service under the 
system provides a client's preference, pricing and\ervice-class information to a common 
service point in exchange for an authenticatable tokra, which the service provider then 
provides to its client, so that the client may in turn offerNiie token to multiple other service 
providers whose services or goods across a data network tn^ client wishes to access, review 
or purchase. 

8. A system as recited in Claim 7, which employees the Internet's Hyper-Text 
Transfer Protocol (HTTP), and has appending means adapted to appending to or include in 
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a Uniform Resource Locator (URL), or in a Request/Response Header, a sequence of alpha- 
numeric characters which includes said authenticatable token. 

9. A system as recited in Claim 7, which includes an acceptance means by which 
a client's token is accepted by a system member from whom the client wishes to receive 
services or goods across a data network, and is instantaneously submitted to the system's 
common service point, which, if the token's contents match that of a token in the common 
service point's dynamic session database, returns preference, pricing and service-class 
information about the requesting client, prior to the providing of the requested services or 
goods across a data network. 

10. A system as recited in Claim 9, of utilizing the User Datagram Protocol (UDP) 
for implementing the acceptance means. 

11. A system as recited in Claim 1, for collecting and storing at a common service 
point discrete records of access by clients to resources or goods across a data network of 
multiple members of the service, where such collection is capable of occurring instantaneously 
subsequent to the providing of each resource or good. 

^12. A system as recited in Claim 11, by which discrete records are instantaneously 
sorted and stored in databases according to the identity of the service provider of the 
individual client wliose activity resulted in the record being produced. 

13. A system as rccjted in Claim 1, for collecting and aggregating records of 
financial charges for access to, review or acquisition of services or goods across a data 
network such that the records may besugplied to the suppliers of client servers without 
knowledge of or reference to the ultimate fonnB^payment by the client. 

14. A system as recited in Claim 1, in which ths^token is only "read" by the 
authentication server, thus permitting the token to be private-keyfenarypted. 
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15. A system as recited in Claim 1, for enabling an initiating Internet World Wide 
WebNtt)st to present in HyperText Markup Language (HTML) "hypertext links" which 
address s^*vices or goods available from multiple other receiving World Wide Web sites such 
that when th^\end user highlights or clicks the link a process is initiated whereby the 
receiving site is abte to receive payment from an agent of the end user's account manager 
for access to, review or acquisition of the services or goods, without regard to whether the 
end user's account is maintained by the initiating WWW host or by some other service 
provider. 



16. A system as recited in ClafrnL which includes a sequence means adapted for 
obtaining, transferring and maintaining amon^multiple network clients a unique alpha- 
numeric sequence associated with a specific digitaPkrformation resource or object for the 
purpose of recording usage, for billing, payment, copyrightjDrotection, ownership control, 
demographic analysis or any other purpose; where the topologicakk)cation of the resource on 
the network may not necessarily be related or relevant to the locatiohs^here, or time when, 
the resource was originally created. 



17. A system as recited in Claim 1, which includes a sequence means adapted for 
obtaining, transferring and maintaining among multiple network clients and their server a 
dynamically updated record of funds encumbered by a network user for the purchase of a 
digital information resource or resources such that each subsequent record of purchase in time, 
and the transfer to clients of an updated record of funds available or authorized to be 
encumbered, is accomplished. 



18. A method for managing client accounts and controlling access to resources over 

data networks, said methocTcol 



(a) a method for sharing client information and charges among a 
service providers, 
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a step which creates a client who is registered with one of the service 
^providers (the "home provider") and is allowed to access the resources of the 
sr service providers ("outside providers") that are part of the method, 



a settling step adapted to allow the method to settle accounts among service 
providers by charging the home provider for access by its clients to the 
resources of the outride providers, 



(d) a payment step adapted to assure that the outside providers are then paid for 
that access through the methocv 

(e) a sharing step adapted to allow the meti^od to allow the providers to share 
users without requiring an open account for e^ch user at each provider, and 



(f) a verification step adapted to allow each provider to "itoermine if a particular 
client is a member of the method, verify that the client ha^uthenticated at his 
home provider, and determine this client's access privileges ahd criteria. 



19. A method as recited in claim 18 by which the owner of goods may sell access 
to those goods across a data network such that the owner may instantaneously and 
simultaneously display across the network multiple differing prices of the same good or 
classes of goods depending upon the alternative pricing requirements of other clients of the 
method as transferred by the method. 



20. A method as recited in claim 18, by which one member of the method may 
instantaneously configure the form and substance of services or goods across a data network 
provided to different or unique clients in response to data about the client provided by the 
method along with the client's request for service. 

21. A method as recited in claim 18, by which one member of the method may 
instantaneously determine whether or what type or form of service or goods across a data 
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network to provide to different or unique clients of the method based upon data about the 
client provided along with the client's request for service. 

22. A method as recited in Claim 18, by which multiple members of the method 
*may_aggregate, transfer and share data about the clients of the method, in a standardized form 



identifying attributes of the client (such as name, address or credit and billingmfonnationX 
need be known only to the one method member responsible for enrolling the client. 

23. A method as recited in Claim 18, in which a client of the method may request 
access to, review of, or purchase of resources or goods across a data network of members of 
the method on the basis of specific attributes of the client which the client elects to provide 
at the moment when service is requested, where such attributes are technically capable of 
being an integral and automatic part of the request form. 

24. A method as recited in Claim 18, in which a provider of service under the 
method provides a client's preference, pricing and service-class information to a common 
service point in exchange for an authenticatable token, which the service provider then 
provides to its client, so that the client may in turn offer the token to multiple other service 
providers whose services or goods across a data network the client wishes to access, review 
or purchase. 

25. A method as recited in claim 24, employing the Internet's Hyper-Text 
Transfer Protocol (HTTP), of appending to or including in a Uniform Resource Locator 
(URL), or in a Request/Response Header, a sequence of alpha-numeric characters which 
includes said authenticatable token. 

26. A method as recited in claim 24, which includes an acceptance step by which 
a client's token is accepted by a method member from whom the client wishes to receive 
services or goods across a data network, and is instantaneously submitted to the method's 
common service point, which, if the token's contents match that of a token in the common 
service point's dynamic session database, returns preference, pricing and service-class 




_by a unique alpha-numeric sequence, but where the personal 
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information about the requesting client, prior to the providing of the requested services or 
goods across a data network. 

27. A method as recited in claim 26, of utilizing the User Datagram Protocol 
(UDP) to accomplish the acceptance step. 



28. A method as recited in claim 18, for collecting and storing at a common 
service point discrete records of access by clients to resources or goods across a data network 
of multiple members of the service, where such collection is capable of occurring 
instantaneously subsequent to the providing of each resource or good. 

29. A method as recited in claim 28, by which discrete records are instantaneously 
sorted and stored in databases according to the identity of the service provider of the 
individual client whose activity resulted in the record being produced. 

30. A method as recited in Claim 18, for collecting and aggregating records of 
financial charges for access to, review or acquisition of services or goods across a data 
network such that the records may be supplied to the suppliers of client servers without 
knowledge of or reference to the ultimate form of payment by the client. 

A system as recited in Claim 18, in which the token is only "read" by the 
authentication^sferv^r, thus permitting the token to be private-key encrypted. 

32. A method as recited^in claim 18, for enabling an initiating Internet World Wide 
Web host to present in HyperText Marjcup Language (HTML) "hypertext links" which 
/ [ address services or goods available from multimember receiving World Wide Web sites such 
that when the end user highlights or clicks the link^a process is initiated whereby the 
receiving site is able to receive payment from an agent of utev^nd user's account manager 
for access to, review or acquisition of the services or goods, withoit^regard to whether the 
end user's account is maintained by the initiating WWW host or by scftn^ other service 
provider. 
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33. A method as recited in claim 18, including the step of obtaining, transferring 
and maintaining among multiple network clients a unique alpha-numeric sequence associated 
with a specificctigital information resource or object for the purpose of recording usage, for 
billing, payment, copyrTghtorotection, ownership control, demographic analysis or any other 
purpose; where the topologicaltbeaiion of the resource on the network may not necessarily 
be related or relevant to the location whei^-Qr time when, the resource was originally created. 

34. A method for obtaining, transferring and niaiQtaining among multiple network 
clients and their server a dynamically updated record of funds enhH^bered by a network user 
for the purchase of a digital information resource or resources such mat^ach subsequent 
record of purchase in time, and the transfer to clients of an updated record of funds.available 
or authorized to be encumbered, is accomplished. 
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